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DETAILED ACTION 

1 . This action is in response to the communication filed on February 01 , 2002. 
Claims 1 - 9 were received for consideration. No preliminary amendments to the 
specification were filed. Claims 1 - 9 are currently being considered. 



Specification 

2. The title of the invention is not descriptive. A new title is required that is clearly 
indicative of the invention to which the claims are directed. The following title is 
suggested: "Data storage with CBC-mode encryption processing" 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

3. Claims 1 - 9 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Michener et al. (U.S. Patent Number 5,671 ,283). 
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Regarding Claim 1, Michener teaches and describes a data storage device 
comprising: 

a data storage area consisting of a plurality of blocks, each of which consists of a 
plurality of sectors which each have a predetermined data capacity (Column 4 lines 9 - 
14); and 

cryptosystem means (Column 4 lines 9-14); 

wherein said cryptosystem means receives, as cryptosystem keys for performing 
cryptosystem processing on data to be stored in said data storage area a set of keys 
correlated with the encryption keys or decryption keys for each of the sectors from a 
device capable of performing data communication with said data storage device, and 
transmits, to said device, a set of encrypted keys obtained by executing encryption 
processing in the cipher block chaining (CBC) mode on the received set of keys 
(Column 4 lines 9 - 31 , Column 5 lines 26 - 53 and Column 6 lines 1 5 - 25). Michener 
teaches that the crypto system receives a set of keys correlated with the encryption or 
decryption (transaction, unit and transaction identification) keys for each block. 

4. Regarding Claim 6, Michener teaches and describes a data recording method 
for a data processor comprising: 

a data storage device comprising cryptosystem means and a data storage area 
consisting of a plurality of blocks, each of which consists of a plurality of sectors which 
each have a predetermined data capacity (Column 4 lines 9-14); and 
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a data recording device for executing data storage processing by transmitting 
data to said data storage device, said data recording method comprising the steps of: 

executing mutual authentication processing between said data storage device 
and said data recording device (Column 6 lines 33 - 45 and Column 7 lines 2 - 5), 
Michener teaches that mutual authentication between the user terminal and the storage 
with crypto unit; 

when the mutual authentication is established, transmitting, to said data storage 
device, by said data recording device, a set of session-key-used CBC-mode-processing 
keys which are generated by executing, based on a session key generated in the 
mutual authentication, encryption processing in the CBC mode on said set of keys 
applicable to encryption processing on pieces of data to be stored in the sectors 
(Column 6 lines 15-61 and Column 7 lines 2 - 5), Michener teaches that when the 
mutual authentication is established and that the transaction verification (session) keys 
are generated to be stored in the sectors; 

decrypting, by said data storage device, said set of session-key-used CBC- 
mode-processing keys by performing decryption in the CBC mode using the session 
key (Column 6 lines 21 - 25 and Column 7 lines 6 - 10); 

transmitting, to said data storage device, a set of decrypting, by storage-key- 
used generated by executing based on a storage key unique to said data storage 
device, encryption processing in the CBC mode on the set of decrypted session-key- 
used CBC-mode-processing keys (Column 7 lines 6-10); and 
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generating, by said data recording device, header information including as a 
component the received set of storage-key-used CBC-mode-processing keys which are 
generating, by said data recording device, header information including as a component 
the received set of storage-key-used CBC-mode-processing keys, the header 
information corresponding to the data to be stored in said data storage device (Column 
6 lines 16-28 and 48-61). 

5. Regarding Claim 7, Michener teaches and describes a data playback method for 
a data processor comprising: 

a data storage device comprising cryptosystem means and a data storage area 
consisting of a plurality of blocks, each of which consists of a plurality of sectors which 
each have a predetermined data capacity; and a data playback device for playing back 
data which is received from said data storage device (Column 4 lines 9-14), said data 
playback method comprising the steps of: 

executing mutual authentication processing between said data storage device 
and said data playback device (Column 6 lines 33 - 45 and Column 7 lines 2 - 5), 
Michener teaches that mutual authentication between the user terminal and the storage 
with crypto unit; 

when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which is included in the header information of data stored in said data 
storage area and which is generated by executing encryption processing in the CBC 
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mode using a storage key unique to said data storage device (Column 6 lines 15-61 
and Column 7 lines 2 - 5), Michener teaches that when the mutual authentication is 
established and that the transaction verification (session) keys are generated to be 
stored in the sectors; 

decrypting, by said data storage device, the set of storage-key-used CBC-mode- 
processing keys by performing decryption in the CBC mode using the storage key 
(Column 6 lines 21 - 25 and Column 7 lines 6 - 10); 

transmitting, by said data storage device, to said data playback device, a set of 
session-key-used CBC-mode-processing keys which are generated by executing, 
based on a session key generated in the mutual authentication encryption processing in 
the CBC mode on the set of decrypted storage-key-used CBC-mode-processing keys 
(Column 7 lines 6 - 10); and 

obtaining, by said data playback device, a set of keys for decrypting encrypted 
sector data which is stored in each of the sectors in said data storage area by 
decrypting, in the CBC mode, the session-key-used CBC-mode-processing keys by 
using the session key (Column 6 lines 55 - 61 and Column 7 lines 2 - 9). 

6. Regarding Claim 8, Michener teaches and describes a program providing 
medium for providing a computer program which controls a computer system to execute 
data recording processing for a data processor comprising: 

a data storage device comprising cryptosystem means and a data storage area 
consisting of a plurality of blocks, each of which consists of a plurality of sectors which 



Application/Control Number: 09/982,624 Page 7 

Art Unit: 2136 

each have a predetermined data capacity; and a data recording device for executing 
data storage processing by transmitting data to said data storage device (Column 4 
lines 9-14); said computer program comprising the steps of: 

executing mutual authentication processing between said data storage device 
and said data recording device (Column 6 lines 33 - 45 and Column 7 lines 2 - 5), 
Michener teaches that mutual authentication between the user terminal and the storage 
with crypto unit; 

when the mutual authentication is established, transmitting, to said data storage 
device, by said data recording device, a set of session-key-used CBC-mode-processing 
keys which are generated by executing, based on a session key generated in the 
mutual authentication, encryption processing in the CBC mode on said set of keys 
applicable to encryption processing on pieces of data to be stored in the sectors 
(Column 6 lines 15-61 and Column 7 lines 2 - 5), Michener teaches that when the 
mutual authentication is established and that the transaction verification (session) keys 
are generated to be stored in the sectors; 

decrypting, by said data storage device, said set of session-key-used CBC- 
mode-processing keys by performing decryption in the CBC mode using the session 
key (Column 6 lines 21 - 25 and Column 7 lines 6 - 10); 

transmitting to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which are generated by executing, based on a storage key unique to 
said data storage device, encryption processing in the CBC mode on the set of 
decrypted session-key-used CBC-mode-processing keys (Column 7 lines 6-10); and 
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generating, by said data recording device, header information including as a 
component the received set of storage-key-used CBC-mode-processing keys which are 
generating, by said data recording device, header information including as a component 
the received set of storage-key-used CBC-mode-processing keys, the header 
information corresponding to the data to be stored in said data storage device (Column 
6 lines 16 -28 and 48-61). 

7. Regarding Claim 9, Michener teaches and describes a program providing 
medium for providing a computer program which controls a computer system to execute 
data playback processing for a data processor comprising: 

a data storage device comprising cryptosystem means and a data storage area 
consisting of a plurality of blocks, each of which consists of a plurality of sectors which 
each have a predetermined data capacity; and a data playback device for playing back 
data which is received from said data storage device (Column 4 lines 9-14); said 
computer program comprising the steps of: 

executing mutual authentication processing between said data storage device 
and said data playback device (Column 6 lines 33 - 45 and Column 7 lines 2 - 5), 
Michener teaches that mutual authentication between the user terminal and the storage 
with crypto unit; 

when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which is included in the header information of data stored in said 
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generated by executing data storage area and which is encryption processing in the 
CBC mode using a storage key unique to said data storage device (Column 6 lines 1 5 - 
61 and Column 7 lines 2 - 5), Michener teaches that when the mutual authentication is 
established and that the transaction verification (session) keys are generated to be 
stored in the sectors; 

decrypting, by said data storage device, the set of storage-key-used CBC-mode- 
processing keys by performing decryption in the CBC mode using the storage key 
(Column 6 lines 21 - 25 and Column 7 lines 6-10); 

transmitting, by said data storage device, to said data playback device, a set of 
session-key-used CBC-mode-processing keys which are generated by executing, 
based on a session key generated in the mutual authentication, encryption processing 
in the CBC mode on the set of decrypted storage-key-used CBC-mode-processing keys 
(Column 7 lines 6-10); and 

obtaining, by said data playback device, a set of keys for decrypting encrypted 
sector data which is stored in each of the sectors in said data storage area by 
decrypting, in the CBC mode, the session-key-used CBC-mode-processing keys by 
using the session key (Column 6 lines 55 - 61 and Column 7 lines 2 - 9). 

8. Claim 2 is rejected applied as above in rejecting Claim 1. Furthermore, Michener 
teaches and describes a data storage device wherein said cryptosystem means, 
generates key data as the header information of the data to be stored in said data 
storage area by using a storage key which is unique to said data storage device to 
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execute the encryption processing in the CBC mode on the received set of keys 
(Column 6 lines 1 6 - 28 and 48 - 61 ). 

9. Claim 3 is rejected applied as above in rejecting Claim 1 . Furthermore, Michener 
teaches and describes a data storage device wherein: 

said data storage with said device capable of performing data communication 
with said data storage device (Column 4 lines 11 - 17); 

the received set of keys is a set device performs mutual authentication of 
session-key-used CBC-mode-processing keys a session key generated in the mutual 
authentication (Column 6 lines 33 - 45 and Column 7 lines 2 - 5), Michener teaches 
that mutual authentication between the user terminal and the storage with crypto unit; 

said cryptosystem means performs the decryption in the CBC mode of said set of 
encrypted session-key-used CBC-mode-encrypted in the CBC mode by using 
processing keys (Column 6 lines 21 - 25 and Column 7 lines 6-10); and 

in said cryptosystem means CBC-mode-processing keys is generated by 
executing, based on a storage key unique to said data storage device, the encryption 
processing in the CBC mode on the set of decrypted session-key-used CBC-mode- 
processing keys, and said set of storage-key-used CBC-mode-processing keys is a set 
of storage-key-used transmitted as header-information-forming data to said device 
(Column 6 lines 1 6 - 28 and 48 - 61 ). 
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10. Claim 4 is rejected applied as above in rejecting Claim 1 . Furthermore, Michener 
teaches and describes a data storage device wherein: 

said data storage device performs mutual authentication with said device capable 
of performing data communication with said data storage device; 

the received set of keys is header information on the data to be stored in said 
data storage area, and is a set of storage-key-used CBC-mode-processing keys 
encrypted in the CBC mode based on a storage key unique to said data storage device 
(Column 6 lines 33 - 45 and Column 7 lines 2 - 5), Michener teaches that mutual 
authentication between the user terminal and the storage with crypto unit; 

said cryptosystem means performs the decryption in the CBC mode of the set of 
encrypted storage-key-used CBC-mode-processing keys by using said storage key 
(Column 6 lines 21 - 25 and Column 7 lines 6 - 10); and 

in said cryptosystem means, a set of session-key-used CBC-mode-processing 
keys is generated by executing, based on a session key generated in the mutual 
authentication, the encryption processing in the CBC mode, and said set of session- 
key-used CBC-mode-processing keys is transmitted as data constituting decrypting key 
information (Column 6 lines 1 6 - 28 and 48 - 61 ). 

11. Claim 5 is rejected applied as above in rejecting Claim 1. Furthermore, Michener 
teaches and describes a data storage device wherein: 
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from said device capable of performing data communication with said data 
storage device, said cryptosystem means receives: said set of keys correlated with the 
encryption keys or decryption keys for the sectors, as cryptosystem keys for performing 
cryptosystem processing on the data to be stored in said data storage area (Column 4 
lines 11 - 17); and 

an integrity-check-value generating key of data to be stored in at least one of the 
sectors (Column 6 lines 33 - 39, 62 - 65 and Column 8 lines 20 - 28); and 

in said cryptosystem means, the received set of keys are encrypted in the CBC 
mode and are transmitted to said device (Column 6 lines 33 - 45 and Column 7 lines 2 
- 5), Michener teaches that mutual authentication between the user terminal and the 
storage with crypto unit. 



Conclusion 

12. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on Tuesday - Thursday 8:00a.m. To 
3:00p.m.. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-232-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR only. For more 
information about the PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). 



Pramila Parthasarathy 
February 21, 2005. 
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